Chat now with support
Chat with Support

Safeguard for Sudo 2.0 - Administrators Guide

One Identity Privileged Access Suite for Unix Introducing Privilege Manager for Unix Introducing Privilege Manager for Sudo Planning Deployment Installation and Configuration
Download Privilege Manager for Unix Software Packages Download Privilege Manager for Sudo Software Packages Quick Start and Evaluation Configure a Primary Policy Server Configure a Secondary Policy Server Install PM Agent or Sudo Plugin on a Remote Host Remove Configurations
Upgrading Privilege Manager System Administration Managing Security Policy The Privilege Manager for Unix Security Policy Advanced Privilege Manager for Unix Configuration Administering Log and Keystroke Files InTrust Plug-in for Privilege Manager Troubleshooting Privilege Manager for Unix Policy File Components Privilege Manager Variables Privilege Manager for Unix Flow Control Statements Privilege Manager for Unix Built-in Functions and Procedures Privilege Manager Programs Installation Packages Unsupported Sudo Options Sudo Plugin Policy Evaluation About us

iolog_encrypt

Description

Type integer READ/WRITE

Set iolog_encrypt to true to encrypt the contents of the keystroke log. The pmreplay program decrypts the log before displaying it. The default value is false.

Example
if (command in {"csh","ksh"}) 
{ 
   iolog_encrypt = true; 
   log_passwords = false; 
   iolog_errmax = 10000; 
   iolog_opmax = 10000; 
   iolog = mktemp("/usr/adm/pm." + user + "." + command + ".XXXXXX"); 
   accept; 
}

iolog_errmax

Description

Type integer READ/WRITE

iolog_errmax limits the number of bytes logged to the keystroke log for each line of stderr produced during the session.

Example
if (command in {"csh","ksh"}) 
{ 
   iolog_encrypt = true; 
   log_passwords = false; 
   iolog_errmax = 10000; 
   iolog_opmax = 10000; 
   iolog = mktemp("/usr/adm/pm." + user + "." + command + ".XXXXXX"); 
   accept; 
}

iolog_opmax

Description

Type integer READ/WRITE

iolog_opmax limits the size in bytes of each stdout keystroke log entry produced during the session.

Example
if (command in {"csh","ksh"}) 
{ 
   iolog_encrypt = true; 
   log_passwords = false; 
   iolog_errmax = 10000; 
   iolog_opmax = 10000; 
   iolog = mktemp("/usr/adm/pm." + user + "." + command + ".XXXXXX"); 
   accept; 
}

iologhost

Description

Type string READ/WRITE

iologhost is a string that defines the host that acts as a centralized I/O log server.

Example
iologhost="sol34.test.com";
Related Documents